Palo_Alto_Networks
XSOAR-ENGINEER · Question #2
XSOAR-ENGINEER Question #2: Real Exam Question with Answer & Explanation
The correct answer is A. It still exists and can be searched.. When an indicator is marked as expired in XSOAR, it remains in the system and can still be searched, but it is considered inactive for enrichment, correlation, or automation unless specifically configured otherwise.
Question
What is the result of an indicator being marked as expired?
Options
- AIt still exists and can be searched.
- BIt is immediately deleted from the database.
- CIt still exists but is not searchable.
- DIt is deleted from the database after seven days.
Explanation
When an indicator is marked as expired in XSOAR, it remains in the system and can still be searched, but it is considered inactive for enrichment, correlation, or automation unless specifically configured otherwise.
Community Discussion
No community discussion yet for this question.